#1141 Add TOTP key field to database and PlayerAuth

- Add new field for storing TOTP key
- Implement data source methods for manipulation of its value

src/main/java/fr/xephi/authme/data/auth/PlayerAuth.java

@@ -26,6 +26,7 @@ public class PlayerAuth {
     /** The player's name in the correct casing, e.g. "Xephi". */
     private String realName;
     private HashedPassword password;
+    private String totpKey;
     private String email;
     private String lastIp;
     private int groupId;
@@ -160,6 +161,10 @@ public class PlayerAuth {
         this.registrationDate = registrationDate;
     }
 
+    public String getTotpKey() {
+        return totpKey;
+    }
+
     @Override
     public boolean equals(Object obj) {
         if (!(obj instanceof PlayerAuth)) {
@@ -195,6 +200,7 @@ public class PlayerAuth {
         private String name;
         private String realName;
         private HashedPassword password;
+        private String totpKey;
         private String lastIp;
         private String email;
         private int groupId = -1;
@@ -219,6 +225,7 @@ public class PlayerAuth {
             auth.nickname = checkNotNull(name).toLowerCase();
             auth.realName = firstNonNull(realName, "Player");
             auth.password = firstNonNull(password, new HashedPassword(""));
+            auth.totpKey = totpKey;
             auth.email = DB_EMAIL_DEFAULT.equals(email) ? null : email;
             auth.lastIp = lastIp; // Don't check against default value 127.0.0.1 as it may be a legit value
             auth.groupId = groupId;
@@ -258,6 +265,11 @@ public class PlayerAuth {
             return password(new HashedPassword(hash, salt));
         }
 
+        public Builder totpKey(String totpKey) {
+            this.totpKey = totpKey;
+            return this;
+        }
+
         public Builder lastIp(String lastIp) {
             this.lastIp = lastIp;
             return this;

src/main/java/fr/xephi/authme/datasource/CacheDataSource.java

@@ -268,6 +268,15 @@ public class CacheDataSource implements DataSource {
         return source.getRecentlyLoggedInPlayers();
     }
 
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        boolean result = source.setTotpKey(user, totpKey);
+        if (result) {
+            cachedAuths.refresh(user);
+        }
+        return result;
+    }
+
     @Override
     public void invalidateCache(String playerName) {
         cachedAuths.invalidate(playerName);

src/main/java/fr/xephi/authme/datasource/Columns.java

@@ -14,6 +14,7 @@ public final class Columns {
     public final String REAL_NAME;
     public final String PASSWORD;
     public final String SALT;
+    public final String TOTP_KEY;
     public final String LAST_IP;
     public final String LAST_LOGIN;
     public final String GROUP;
@@ -35,6 +36,7 @@ public final class Columns {
         REAL_NAME         = settings.getProperty(DatabaseSettings.MYSQL_COL_REALNAME);
         PASSWORD          = settings.getProperty(DatabaseSettings.MYSQL_COL_PASSWORD);
         SALT              = settings.getProperty(DatabaseSettings.MYSQL_COL_SALT);
+        TOTP_KEY          = settings.getProperty(DatabaseSettings.MYSQL_COL_TOTP_KEY);
         LAST_IP           = settings.getProperty(DatabaseSettings.MYSQL_COL_LAST_IP);
         LAST_LOGIN        = settings.getProperty(DatabaseSettings.MYSQL_COL_LASTLOGIN);
         GROUP             = settings.getProperty(DatabaseSettings.MYSQL_COL_GROUP);

src/main/java/fr/xephi/authme/datasource/DataSource.java

@@ -232,6 +232,25 @@ public interface DataSource extends Reloadable {
      */
     List<PlayerAuth> getRecentlyLoggedInPlayers();
 
+    /**
+     * Sets the given TOTP key to the player's account.
+     *
+     * @param user the name of the player to modify
+     * @param totpKey the totp key to set
+     * @return True upon success, false upon failure
+     */
+    boolean setTotpKey(String user, String totpKey);
+
+    /**
+     * Removes the TOTP key if present of the given player's account.
+     *
+     * @param user the name of the player to modify
+     * @return True upon success, false upon failure
+     */
+    default boolean removeTotpKey(String user) {
+        return setTotpKey(user, null);
+    }
+
     /**
      * Reload the data source.
      */

src/main/java/fr/xephi/authme/datasource/FlatFile.java

@@ -398,6 +398,11 @@ public class FlatFile implements DataSource {
         throw new UnsupportedOperationException("Flat file no longer supported");
     }
 
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        throw new UnsupportedOperationException("Flat file no longer supported");
+    }
+
     /**
      * Creates a PlayerAuth object from the read data.
      *

src/main/java/fr/xephi/authme/datasource/MySQL.java

@@ -248,6 +248,11 @@ public class MySQL implements DataSource {
                 st.executeUpdate("ALTER TABLE " + tableName + " ADD COLUMN "
                     + col.HAS_SESSION + " SMALLINT NOT NULL DEFAULT '0' AFTER " + col.IS_LOGGED);
             }
+
+            if (isColumnMissing(md, col.TOTP_KEY)) {
+                st.executeUpdate("ALTER TABLE " + tableName
+                    + " ADD COLUMN " + col.TOTP_KEY + " VARCHAR(16);");
+            }
         }
         ConsoleLogger.info("MySQL setup finished");
     }
@@ -728,6 +733,20 @@ public class MySQL implements DataSource {
         return players;
     }
 
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        String sql = "UPDATE " + tableName + " SET " + col.TOTP_KEY + " = ? WHERE " + col.NAME + " = ?";
+        try (Connection con = getConnection(); PreparedStatement pst = con.prepareStatement(sql)) {
+            pst.setString(1, totpKey);
+            pst.setString(2, user.toLowerCase());
+            pst.executeUpdate();
+            return true;
+        } catch (SQLException e) {
+            logSqlException(e);
+        }
+        return false;
+    }
+
     private PlayerAuth buildAuthFromResultSet(ResultSet row) throws SQLException {
         String salt = col.SALT.isEmpty() ? null : row.getString(col.SALT);
         int group = col.GROUP.isEmpty() ? -1 : row.getInt(col.GROUP);
@@ -735,6 +754,7 @@ public class MySQL implements DataSource {
             .name(row.getString(col.NAME))
             .realName(row.getString(col.REAL_NAME))
             .password(row.getString(col.PASSWORD), salt)
+            .totpKey(row.getString(col.TOTP_KEY))
             .lastLogin(getNullableLong(row, col.LAST_LOGIN))
             .lastIp(row.getString(col.LAST_IP))
             .email(row.getString(col.EMAIL))

src/main/java/fr/xephi/authme/datasource/SQLite.java

@@ -171,6 +171,11 @@ public class SQLite implements DataSource {
                 st.executeUpdate("ALTER TABLE " + tableName
                     + " ADD COLUMN " + col.HAS_SESSION + " INT NOT NULL DEFAULT '0';");
             }
+
+            if (isColumnMissing(md, col.TOTP_KEY)) {
+                st.executeUpdate("ALTER TABLE " + tableName
+                    + " ADD COLUMN " + col.TOTP_KEY + " VARCHAR(16);");
+            }
         }
         ConsoleLogger.info("SQLite Setup finished");
     }
@@ -654,6 +659,21 @@ public class SQLite implements DataSource {
         return players;
     }
 
+
+    @Override
+    public boolean setTotpKey(String user, String totpKey) {
+        String sql = "UPDATE " + tableName + " SET " + col.TOTP_KEY + " = ? WHERE " + col.NAME + " = ?";
+        try (PreparedStatement pst = con.prepareStatement(sql)) {
+            pst.setString(1, totpKey);
+            pst.setString(2, user.toLowerCase());
+            pst.executeUpdate();
+            return true;
+        } catch (SQLException e) {
+            logSqlException(e);
+        }
+        return false;
+    }
+
     private PlayerAuth buildAuthFromResultSet(ResultSet row) throws SQLException {
         String salt = !col.SALT.isEmpty() ? row.getString(col.SALT) : null;
 
@@ -662,6 +682,7 @@ public class SQLite implements DataSource {
             .email(row.getString(col.EMAIL))
             .realName(row.getString(col.REAL_NAME))
             .password(row.getString(col.PASSWORD), salt)
+            .totpKey(row.getString(col.TOTP_KEY))
             .lastLogin(getNullableLong(row, col.LAST_LOGIN))
             .lastIp(row.getString(col.LAST_IP))
             .registrationDate(row.getLong(col.REGISTRATION_DATE))

src/main/java/fr/xephi/authme/settings/properties/DatabaseSettings.java

@@ -79,6 +79,10 @@ public final class DatabaseSettings implements SettingsHolder {
     public static final Property<String> MYSQL_COL_HASSESSION =
         newProperty("DataSource.mySQLColumnHasSession", "hasSession");
 
+    @Comment("Column for storing a player's TOTP key (for two-factor authentication)")
+    public static final Property<String> MYSQL_COL_TOTP_KEY =
+        newProperty("DataSource.mySQLtotpKey", "totp");
+
     @Comment("Column for storing the player's last IP")
     public static final Property<String> MYSQL_COL_LAST_IP =
         newProperty("DataSource.mySQLColumnIp", "ip");